Ransomware Recovery Scheme Exposed as $11M Scam A shocking case of cybercrime has come to light in the United States, where a company owner was charged with defrauding clients through a ransomware remediation scheme. Zohar Pinhasi, 50, the owner of MonsterCloud, allegedly convinced organizations that fell victim to ransomware attacks to pay his company for … Read more
Samsung Galaxy S26 Hacked Three Times at Pwn2Own Ireland, Zero-Day Flaws Revealed Security researchers have been busy at Pwn2Own Ireland 2026, a competition that tests the vulnerability of popular devices and software to zero-day attacks. On the second day of the event, three separate teams successfully hacked the Samsung Galaxy S26 flagship smartphone, exposing critical … Read more
A notorious npm package, Tensorlake, has been compromised to deliver a stealthy credential-stealing worm dubbed Shai-Hulud. The malicious update affects users who have installed the library in their projects, potentially exposing sensitive authentication credentials and paving the way for further attacks. Tensorlake is an open-source JavaScript library used for image processing and computer vision tasks. … Read more
A notorious cybersecurity firm, MonsterCloud, has been accused of a shocking scheme that reveals the dark underbelly of the ransomware industry. The company’s owner is alleged to have billed clients over $19 million for services that didn’t exist, while secretly paying ransoms on their behalf to decrypt encrypted data. The accusations against MonsterCloud come after … Read more
A $10 Million Bounty for Tips on HAFNIUM Hacker Zhang Yu, as Experts Warn of Identity Exposure Risks The US Department of Justice has put out a call for information on Zhang Yu, the alleged mastermind behind a series of high-profile hacking incidents linked to the notorious HAFNIUM group. As part of this effort, the … Read more
FortiBleed Attackers Lock Out Organizations from Fortinet Devices Worldwide A highly sophisticated cyber attack campaign, known as FortiBleed, has been making headlines for months, targeting organizations with Fortinet’s firewalls and VPN appliances. The attackers have been using compromised credentials and brute-force techniques to gain access to vulnerable devices, but the latest twist is that they’re … Read more
Cybersecurity Researchers Score Big Wins at Pwn2Own Ireland 2026, Hacking Top-End Devices with Ease In a stunning display of skill and determination, cybersecurity researchers at Pwn2Own Ireland 2026 have successfully hacked three Samsung Galaxy S26 flagship devices in under two days. The event, organized by Trend Micro’s Zero Day Initiative (ZDI), has already seen contestants … Read more
A Critical npm Package Compromise Highlights the Risks of Supply Chain Attacks A significant cybersecurity incident has been reported, involving a compromised npm package called Tensorlake. The package, used in various software projects, has been found to be delivering a malicious credential-stealing worm known as Shai-Hulud. This development highlights the importance of secure coding practices … Read more
A shocking case of cybercrime has come to light, involving a company that promised its clients top-notch cybersecurity protection but secretly paid ransoms on their behalf while billing them millions. MonsterCloud, a well-known provider of managed security services, is accused of pocketing over $19 million from its clients by charging them for services not rendered, … Read more
The US government has put a significant price on the head of Zhang Yu, a Chinese national accused of orchestrating a series of high-profile hacking operations targeting US companies. The Department of State’s Rewards for Justice program is offering up to $10 million to anyone who can provide information leading to Zhang’s capture or conviction. … Read more